[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2026-41499":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":24,"technologies":26,"references":28,"score":31,"epss_score":32,"epss_percentile":33,"is_kev":34,"cisa_kev_date_added":35,"cisa_kev_due_date":35,"cisa_ssvc":36,"attack_mappings":46,"exploits":53},15641,"CVE-2026-41499","EUVD-2026-26272","Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, multiple heap-based out-of-bounds WRITE vulnerabilities exist in parse_uname_string() (remoted_op.c). This function processes OS identification data from agents and contains a dangerous code pattern that appears in 4 locations within the same function: writing to strlen(ptr) - 1 without checking for empty strings. When the string is empty, strlen() returns 0, and 0 - 1 wraps to SIZE_MAX due to unsigned integer underflow. Due to pointer arithmetic wrapping, SIZE_MAX effectively becomes -1, causing a write exactly 1 byte before the allocated buffer. This corrupts heap metadata (e.g., the chunk size field in glibc malloc), leading to heap corruption. This issue has been patched in version 4.14.4.","2026-04-29T19:16:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":19,"privilegesRequired":18,"confidentialityImpact":17},"UNCHANGED","3.1",6.5,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","NONE","LOW","HIGH",true,[22,23],"CWE-124","CWE-191",[25],"cpe:2.3:a:wazuh:wazuh:*:*:*:*:*:*:*:*",[27],"Wazuh Wazuh",[29,30],"https:\u002F\u002Fgithub.com\u002Fwazuh\u002Fwazuh\u002Freleases\u002Ftag\u002Fv4.14.4","https:\u002F\u002Fgithub.com\u002Fwazuh\u002Fwazuh\u002Fsecurity\u002Fadvisories\u002FGHSA-qvqj-p8mm-r7h3",0.53,0.00254,0.16826,false,null,{"timestamp":37,"automatable":38,"tech_impact":39,"exploitation":40,"cisa_decision":41,"cisa_remediation_timeline":45},"2026-04-29T18:31:03.330693Z","no","partial","poc",{"vector":42,"decision":43,"priority":44},"CISAv1\u002FE:P\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T16:05:00.760945\u002F","track_star","medium","60D",[47],{"name":48,"source":49,"tactics":50,"technique_id":52},"Exploit Public-Facing Application","attack_vector",[51],"initial-access","T1190",[]]